MECM Engineer

Amatriot Group, LLC; Bethesda (MD); Hybrid; USD 130,000 - 165,000; Full time

Job summary

Amatriot Group is seeking a Senior Windows Engineer (MECM) to support NSWC Carderock Division in West Bethesda, MD. The role focuses on MECM infrastructure, OS deployment, patch management, automation, and cybersecurity compliance in a hybrid work setting.

The candidate will manage MECM and SQL Server environments, develop Windows images, automate tasks with PowerShell, and ensure DISA STIG and vulnerability remediation are in place. Active TS or higher clearance is required.

Qualifications

• 8+ years of systems administration or IT infrastructure experience.
• 3+ years hands-on MECM/SCCM administration.
• Strong Windows Server/enterprise Windows environment experience.
• Experience with DoD/DoN security baselines and DISA STIGs.

Responsibilities

• Architect, administer, and maintain MECM infrastructure including sites, distribution points, and SQL Server environments.
• Develop and deploy Windows 11 and Windows Server 2022 images using MDT and MECM.
• Coordinate enterprise patching and software deployments across the organization.
• Configure and maintain Recast infrastructure for endpoint management and patching.
• Implement and maintain DoD/DoN security baselines and vulnerability remediation.

Skills

MECM/SCCM administration

PowerShell scripting

VMware familiarity

Cybersecurity compliance

Education

Bachelor's degree in CS/IT or related field

Tools

SQL Server

SSRS

Recast Management Server

WSUS

Job description

Location: West Bethesda, MD
Security Clearance: Active TS or higher [Required]
Job Type: Full-Time
Target Salary Range*:$130,000-165,000

*This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview:

Amatriot Group is seeking a Senior Windows Engineer (MECM) to support enterprise IT infrastructure operations at the Naval Surface Warfare Center (NSWC) Carderock Division in West Bethesda, MD.

The ideal candidate will have extensive experience administering and engineering Windows enterprise environments, with a strong emphasis on Microsoft Endpoint Configuration Manager (MECM), operating system deployment, patch management, infrastructure automation, and cybersecurity compliance.

This position will support both physical and virtual infrastructure in a hybrid work environment. Candidates must be available to respond onsite to critical infrastructure outages as needed, with onsite responsibilities coordinated across the engineering team.

Key Responsibilities:

• MECM Infrastructure: Architect, administer, and maintain enterprise MECM infrastructure, including Primary Sites, Distribution Points, Management Points, WSUS, Recast Management Servers, and supporting SQL Server environments.
• Operating System Deployment: Develop, harden, and maintain standardized Windows 11 and Windows Server 2022 images using Microsoft Deployment Toolkit (MDT) and MECM Task Sequences. Manage driver packages, imaging processes, and post-deployment configurations.
• Patch Management: Coordinate enterprise-wide Windows patching, including Microsoft Patch Tuesday updates, third-party application updates, and automated software deployments.
• Recast Administration: Configure, maintain, and troubleshoot Recast infrastructure to support endpoint management, application deployment, and third-party patching.
• Cybersecurity Compliance: Implement and maintain DoD/DoN security baselines, including DISA STIGs, vulnerability remediation, and continuous compliance improvements.
• PowerShell Automation: Develop and maintain PowerShell scripts to automate system administration, software deployments, patching, and remediation activities.
• SQL Server Administration: Install, configure, maintain, and troubleshoot SQL Server instances supporting MECM, including database performance, backups, and recovery.
• Infrastructure Management: Support Windows Server environments across physical and VMware-based virtual infrastructure.
• Reporting: Develop hardware/software inventory, patch compliance, and asset management reports using SQL Server Reporting Services (SSRS) and Recast.
• Advanced Troubleshooting: Provide Tier 3 engineering support for complex Windows infrastructure, MECM, software deployment, and operating system issues.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical discipline.
• 8+ years of relevant systems administration, infrastructure engineering, or IT experience.
• 3+ years of hands-on experience administering Microsoft Endpoint Configuration Manager (MECM/SCCM).
• Strong experience administering Windows Server and Windows enterprise environments.
• Experience developing and maintaining standardized Windows operating system images and automated deployment packages.
• Proficiency with PowerShell scripting and enterprise automation.
• Experience with SQL Server administration and database troubleshooting.
• Experience with enterprise patch management, vulnerability remediation, and DISA STIG compliance.
• Familiarity with VMware virtualization environments.
• Strong troubleshooting skills and ability to independently resolve complex infrastructure issues.
• Active Secret clearance and a favorably adjudicated Tier 5 background investigation.
• CompTIA Security+ certification and applicable DoD Cybersecurity Workforce (CSWF) qualification.
• Relevant Microsoft professional certification.

Preferred Qualifications:

• Experience supporting Navy or other DoD enterprise IT environments.
• Experience administering Recast Management Server and associated endpoint management tools.
• Experience with SQL Server Reporting Services (SSRS).
• Experience developing custom MECM solutions, automated remediation workflows, and enterprise reporting capabilities.
• Familiarity with DoD Risk Management Framework (RMF) processes.
• Experience supporting mission-critical infrastructure requiring rapid outage response.